Hauptmenü

Linux Firewall

Linux Server

Dienstleistungen

Dokumente
Black Sheeps RBLSPAM

Black Sheeps of the internet.


Some providers just do nothing if you send them a complains/abuse. Sometimes the abuse even bounces, because it finds spam. Those mailserver will be reported here plus blacklisted.

20.06.2010 This time Yahoo is the smart one. We start to block yahoo.
Hello,

Thank you for writing to Yahoo! Mail.

Mass distribution of unsolicited email messages, or "spamming," violates
the Yahoo! Terms of Service (TOS).

After investigation, we have determined that this email message did not 
originate from the Yahoo! Mail system.  It appears that the sender of 
this message forged the header information to give the impression that 
it came from the Yahoo! Mail system.

We take the operation of Yahoo! Mail very seriously. Unfortunately, 
there is no control over messages sent through other email systems and 
it's not possible to preempt the misuse of the Yahoo! name in forged 
headers. While Yahoo! cannot technically prevent its domain from being 
forged in the headers of an email message, actions have been taken 
against companies in an effort to prevent further forgery of the Yahoo! 
brand and to seek damages as appropriate. Individuals are strongly 
discouraged from forging the Yahoo! domain in the future and appropriate
action will be taken as necessary.

In addition, please visit the following website for useful tools to 
combat spam:

   http://antispam.yahoo.com/

Please let me know if you still need assistance so I may assist you 
further.

Your patience during this process is greatly appreciated.

Thank you again for contacting Yahoo! Mail.

Regards,

Prack

Yahoo! Customer Care

72542124




Original Message Follows:
-------------------------

Return-Path: 
Delivered-To: spam-quarantine
X-Envelope-From: 
X-Envelope-To: 
X-Envelope-To-Blocked: 
X-Quarantine-ID: 
X-Spam-Flag: YES
X-Spam-Score: 7.636
X-Spam-Level: *******
X-Spam-Status: Yes, score=7.636 tag=0 tag2=5 kill=6.1
        tests=[ADVANCE_FEE_2=1.234, BAYES_50=0.001,
        RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_SBL=1.551,
        RCVD_IN_SORBS_WEB=0.619, SPF_NEUTRAL=0.686, URG_BIZ=1.585]
Received: from mx1.YYYYYYY.de ([127.0.0.1])
        by localhost (mx1.YYYYYYYY.de [127.0.0.1]) (amavisd-new, port 
10024)
        with ESMTP id U1+RPmJJW9AY for ;
        Fri, 18 Jun 2010 10:49:33 +0200 (CEST)
Received: from n73a.bullet.mail.sp1.yahoo.com 
(n73a.bullet.mail.sp1.yahoo.com [98.136.45.20])
        by mx1.YYYYYYYYYYYYYY.de (Postfix) with SMTP id 5CF66BF9B
        for ; Fri, 18 Jun 2010 10:49:33 +0200 
(CEST)
Received: from [216.252.122.219] by n73.bullet.mail.sp1.yahoo.com with 
NNFMP; 18 Jun 2010 08:49:32 -0000
Received: from [69.147.65.164] by t4.bullet.sp1.yahoo.com with NNFMP; 18
Jun 2010 08:49:32 -0000
Received: from [127.0.0.1] by omp409.mail.sp1.yahoo.com with NNFMP; 18 
Jun 2010 08:49:32 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 85196.52259.bm@omp409.mail.sp1.yahoo.com
Received: (qmail 90657 invoked by uid 60001); 18 Jun 2010 08:49:31 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; 
s=s1024; t=1276850971; bh=/CyAHsOBXR61Ufw2KPLsP8ke0cVh1sIox/vqO84krWg=; 
h=Message-ID:X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Date:From:Reply-
To:Subject:To:MIME-Version:Content-Type;
b=N2WeO5kGJU6NxYG0H+gtoIL8rUwL+Vq78MS2WcCzHfrADPnJNUpBghJzaVhDYrxPFG2hIz
aqhKshyaFyVd4RQMFMJZbOXvAX+tvfUtJuf7pVlkFA1R3flaGmqZR3N29y+qbYAo8lAlM6CI
ypyZb+GQsD5Nt5kCgZqM9hwWAUe6g=
Message-ID: <863478.88819.qm@web44815.mail.sp1.yahoo.com>
X-YMail-OSG: sCNBrA4VM1l9afR4yr1JdBHjsAI8A3sV9afGLcD0HV9dV75
 1B6aEox1mjQ5eNea71Jiyk81Pp1JeOLRBSQRfw.1U8gFCbTkvwQ4ycbq7JoM
 LBRl0wAh7hwOEFF0Ih77PEM1hNoHq9iSc.ojQjKHiheDv1aNt3.7PmFLecrA
 uU9GMtWkibOZozj30KoIcP7dNnwVRyAZFuz4rQrGpVQVR2GWV7xaVZLwQBfJ
 wmXExgt9S6pVYqx4VxUVI5RCHRnrqOXXYIl6uLe6Yw3v705RPuYTWm.pHNi4
 qOdgxoqVqpT3NrtaDn_pA_RtdJSjR_Du6FhOhbB3XXlv9.S56vw1oWrjeac3
 mlsu6JWLCL2x3IMSLMz9ybltq633b.wlVH9bFR2dUqSPkjWo_9DVtJrXVeP7
 7vfkFLI3sLXYdFt9dfcJvrxcsuVxmYhZlM6gKkPpL_noVtFQdVl2bI5FtgIt
 l7k3Nrf1xNDIwd6HR_W0IHSCWc2vydG2OyNLY2H_55Q2h6Cl7pQUZ_CUmBTs
 numL4.4L0kQwLuXOIdoEda0KJkr0YBNgGWc9hyjcC0Upipsw4HoRh_xhtAlc
 lHxwOajvVchFlDanfCtANfEuM43_YFJGGLlEm.S9vO8HBWmlvS4FYu3xAqqS
 COZq7GiUvt4P.HRvg9TviMYTQevxMBO25Lq_YS_uuMtJoU82GRvE0VRgz1ks
 HebmWAbxSBUts4HsjeJLfstf_i0ofXuZfAQJj9td9wDYHZPGAIeywYxcVad1
 wz2CoGyrYYfg4k556n0PWKF2OghxSOa23owCaXu.85fJUR1Yr4H2BZePhWGT
 C6Tm7BvPtaHDzkuxO1q2529PlIPsmyWQrM0z.JiegVQZw01qMkOd2DngWQnE
 A7B_PuxCLbVzFJPHMDKIJhrQAUWRPpXy5fpub1g4KcMI06gSa_gF1AGrBZLf
 jUxOKNeq8nzDJt0roeARvBwFlDty._vD9COAv.0hcjkDmWdJ_mR4jZ8A08xC
 p6QIAQuz.84KCi3JAsb2ZknkjaqDwRvJE3CEHXyXejSkpNz4aWiImnWw1OIi
 M3e1YZGw-
Received: from [212.52.148.109] by web44815.mail.sp1.yahoo.com via HTTP;
Fri, 18 Jun 2010 01:49:31 PDT
X-RocketYMMF: jenetx123
X-Mailer: YahooMailClassic/11.1.4 YahooMailWebService/0.8.104.274457
Date: Fri, 18 Jun 2010 01:49:31 -0700 (PDT)
From: Miss Jenet Harry Johnson 
Reply-To: jenet20@rediffmail.com
Subject: Dearest,
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii

Dearest,

I am writing this mail to you with tears and sorrow from my heart. I 
will really like to have a good relationship with you, and I have a 
special reason why I decided to contact you.
I decided to contact you because of the urgency of my situation here ,I 
am Miss Jenet Harry Johnson 25years old girl from Liberia, the only 
daughter of Late prince Harry Johnson the deputy minister of national 
security under the leadership of president Charles Taylor who is now in 
exile after many innocent soul were killed ,My father was killed by 
government of Charles Taylor ,he accuse my father of coup attempt. I am 
constrained to contact you because of the maltreatment I, am receiving 
from my step mother. She planned to take away all my late father's 
treasury and properties from me since the unexpected death of my beloved
Father. Meanwhile I wanted to escape to the Europe but she hides away my
international passport and other valuable travelling documents. 

Luckily she did not discover where I kept my father's File which 
contains important documents. So I decided to run to the refugee camp 
where I am presently seeking asylum under the United Nations High 
Commission for the Refugee here in Ouagadougou, Republic of Burkina 
Faso. I wish to contact you personally for a long term business 
relationship and investment assistance in your Country. My father of 
blessed memory deposited the sum of US$5, 7, Million Dollars in Bank 
with my name as the next of kin. However, 

I shall forward you with the necessary documents on confirmation of your
acceptance to assist me for the transfer and investment of the fund. As 
you will help me in an investment, and I will like to complete my 
studies, as I was in my 1st year in the university, when the crisis 
started. It is my intention to compensate you with 10% of the total 
money for your services and the balance shall be my investment capital. 

This is the reason why I decided to contact you. Please all 
communications should be through this email address only for 
confidential purposes. As soon as I receive your positive response 
showing your interest I will put things into action immediately In the 
light of the above, I shall appreciate an urgent message indicating your
ability and willingness to handle this transaction sincerely. I am 
staying at the female hostel. Awaiting your urgent and positive 
response. Please do keep this to yourself and every communications hall 
be made through this email address alone for confidential purpose and 
you should not disclose it till i come over , once the fund has been 
transferred. 
Thanks, I will send you my pictures as soon as I Read from you again 
please tell me more about yourself.
Yours Love Sincerely,
Miss Jenet Harry Johnson.

25.01.2010 Still 1und1 sending Spam. They don't care about abuse emails we send. Here is one of the spam:
From newsletter@classic-design24.com  Sun Jan 24 01:02:30 2010
Return-Path: 
X-Original-To: teergrube@sys2.cug
Delivered-To: teergrube@sys2.cug
Received: from localhost (localhost [127.0.0.1])
        by vmx1.sys2.de (Server protected by http://www.rblspam.de) with ESMTP id E19605C8EA
        for ; Sun, 24 Jan 2010 01:02:30 +0100 (CET)
X-Virus-Scanned: Debian amavisd-new at lenny-dev.sys2.cug
Received: from vmx1.sys2.de ([127.0.0.1])
        by localhost (vmx1.sys2.cug [127.0.0.1]) (amavisd-new, port 10024)
        with ESMTP id a6OxS+Jrj2tZ for ;
        Sun, 24 Jan 2010 01:02:30 +0100 (CET)
Received: from portal.sys2.de (fw.sys2.cug [172.21.1.254])
        by vmx1.sys2.de (Server protected by http://www.rblspam.de) with ESMTP id EB5A05C3E6
        for ; Sun, 24 Jan 2010 01:02:29 +0100 (CET)
Received: from localhost (localhost [127.0.0.1])
        by portal.sys2.de (MTA) with ESMTP id 69964F0010
        for ; Sun, 24 Jan 2010 01:10:04 +0100 (CET)
X-Virus-Scanned: SysQuadrat rblspam at portal.sys2.de
Received: from portal.sys2.de ([127.0.0.1])
        by localhost (portal.sys2.de [127.0.0.1]) (amavisd-new, port 10024)
        with ESMTP id aegwHCML0L5J for ;
        Sun, 24 Jan 2010 01:09:58 +0100 (CET)
Received: from moutng.kundenserver.de (moutng.kundenserver.de [212.227.126.171])
        by portal.sys2.de (MTA) with ESMTP id 18248F000F
        for ; Sun, 24 Jan 2010 01:09:58 +0100 (CET)
Received: from S15258540.Local (s15258540.onlinehome-server.info [87.106.133.72])
        by mrelayeu.kundenserver.de (node=mreu2) with ESMTP (Nemesis)
        id 0MZhco-1NFdwR1npu-00LXPV; Sun, 24 Jan 2010 01:09:57 +0100
X-SM-NLID: {8E8D6739-1BA8-4DAB-A63E-073136E5AF87}
X-SM-NLPID: {45}
X-Origin: SmartStore Office 1.1.28 - SmartStore AG
Reply-To: 
Message-ID: 
From: "=?iso-8859-1?B?Q2xhc3NpYyBEZXNpZ24gKEV1cm9wZSkgTHRkLg==?=" 
To: 
Subject: =?iso-8859-1?B?QmVzdCB3aXNoZXMgZm9yIGEgTmV3IERlY2FkZSAtIENsYXNzaWMgRGVzaWduIC0gQmF1aGF1cyBm
        b3IgSG9tZSAmIE9mZmljZQ==?=
Date: Sun, 24 Jan 2010 01:09:57 +0100
X-Priority: 3
X-Mailer: SMTP COMPONENT
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="----=NextMime00A_000_-2086837281D"
X-Provags-ID: V01U2FsdGVkX18eFUjeB8l3eqlcLwrg0oJmt2YoDHF171+JwlK
 0QJ6dJFaqVXBKRec6RU+/cSwY0H8qBpYBVbCqS7PTZ9aPM7g/

This is a multi-part message in MIME format.
16.4.2007 wannadoo.nl blacklisted. Sended alot of spam in a short time plus pervious warnings.


Druckversion

zuletzt geändert am 20.06.2010


(c) 2003,2004,2005,2006,2007,2008 by M. Weinert       
SysQuadrat Portal Linux Firewall / Security und mehr
Diese Seite ist Bestandteil von www.linux-firewall.de